[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] wrong MD5 sum in advisory SUSE-SA:2006:009



Hi!


On Monday 27 February 2006 23:30, Malte Gell wrote:
> http://www.novell.com/linux/security/advisories/2006_09_gpg.html
>
> The given MD5 5098f06cba2e38aa0b5181fb3f9cd7f3 for the SUSE 10.0 GnuPG
> 1.4.2-5.2 source RPM
>
> ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/gpg-1.4.2-5.2.src.rpm
>
> is wrong, on my machine I get
>
> fe3233bc0b60f6fa67ac6f062af2c793.
>
> But the rpm seems to be signed correctly with the package key 0x9c800aca
>
> Malte

Full ACK, I get:

david@imladris:/srv/ftp/pub/suse/i386/update/10.0/rpm/src> md5sum 
gpg-1.4.2-5.2.src.rpm
fe3233bc0b60f6fa67ac6f062af2c793  gpg-1.4.2-5.2.src.rpm

Something wrong with the md5 announced by SuSE...

FYI: I got the package via rsync from ftp.hosteurope.de.


-- 
Eat, sleep and go running,
David Hücking.

Encrypted eMail welcome! 
GnuPG/ PGP-Key: 0x57809216. Fingerprint: 
3DF2 CBE0 DFAA 4164 02C2  4E2A E005 8DF7 5780 9216

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here